Results 1 to 8 of 8
  1. #1
    Untangler
    Join Date
    Oct 2009
    Posts
    92

    Default disconnected during smtp transfer

    If I turn off spam blocker is there anything else that will block smtp connections?

    I have one person that can not email a client of mine that is behind a untangle, it is an aol email address and they get the following bounce back
    SMTP; 451 4.4.1 reply: read error.

    I have checked and turned off everything and nothing has worked.

    The only reason I think this might be a untangle issue is because I had the aol user email us directly and we use GFI to filter spam before it gets to our untangle and GFI reported Status Replyisconnected during SMTP transfer when trying to deliever the email to our exchange server behind our untangle.

    They only thing the same on these sites is that they both have untangle, one has exchange 2010 and one has 2003.

    Thanks for any help

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,542

    Default

    Outgoing SMTP is not processed by Untangle.

    If I were you I'd be attacking the AV client on that workstation.

    Also, do you have Intrusion Prevention installed? Try turning that off.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Untangler
    Join Date
    Oct 2009
    Posts
    92

    Default

    its incoming email. user from outside that has an aol email address can not email my client that is behind the untangle.

    I just disabled the intrustion protection on my server and the email that GFI could not deliever to me from that same AOL user just came through....So intrustion protection blocks emails? what are my next steps to figure out why it is blocked with intrusion protection?

    Thanks for the quick reply!

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,756

    Default

    I would take a look at the logs in Intrusion Prevention. Most likely it's only one rule causing false positive in this case. Just turn off that rule instead of the entire app.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,542

    Default

    Quote Originally Posted by logicsound View Post
    its incoming email. user from outside that has an aol email address can not email my client that is behind the untangle.

    I just disabled the intrustion protection on my server and the email that GFI could not deliever to me from that same AOL user just came through....So intrustion protection blocks emails? what are my next steps to figure out why it is blocked with intrusion protection?

    Thanks for the quick reply!
    Intrusion Prevention deals with all traffic, it isn't a matter of SMTP or not. Bottom line, the module actually works in 9.0. So unless you want to be in there tinkering and tuning, I suggest you simply turn it off.

    JCoffin is correct, there is likely an easy to find rule violation in the logs now that you can disable that specific rule. However, be aware that IDS systems have false positives all the time. This is simply par for the course. So if you're not wanting to deal with this, turn the module off.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  6. #6
    Untangler
    Join Date
    Oct 2009
    Posts
    92

    Default

    Could not find an exact time match but I think it is the following rule causing it

    #11837 SMTP MS WINDOWS MAIL UNC navigation remote command execution

    Anybody know what this rule is doing? I know I can turn the rule off but I would like to know what this rule does and what it sees in the email to block it so I can relay this to my client. (yes I did google it, but found nothing)
    Thanks
    Trevor

  7. #7
    Untangler
    Join Date
    Oct 2009
    Posts
    92

    Default

    Anybody know what that rule does?

  8. #8
    some dude hlarsen's Avatar
    Join Date
    Jul 2010
    Location
    sfba
    Posts
    1,384

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2